Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: F7nF4+QovyO8FfkScR2zUIJRjaFdX+MP7MqcT9ylywg=
Subject key identifier: 24:8A:0F:BB:EF:97:FE:E3:3A:12:F6:22:FA:3B:A5:1A:9B:C8:1F:4E
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 0198481BBFAC44396EC07585363E3A530268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 130D
Signing time: Sat 26 Jul 2025 19:00:34 +0000
Manifest this update: Sat 26 Jul 2025 19:00:34 +0000
Manifest next update: Sun 27 Jul 2025 19:00:34 +0000
Files and hashes: 1: mj2SP2YUf8OOW3PWyfsSenlnbcQ.roa (hash: 7rYL22HIBA9YP5PrLL9E5bTyxJEJdAa2DC73cuHwaP4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: PXg6qArBSPlvGxokEp8h2Mc8C/Lj/e1bap5pEU8SSIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:bf:ac:44:39:6e:c0:75:85:36:3e:3a:53:02:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Jul 26 19:00:34 2025 GMT
Not After : Jul 27 19:00:34 2025 GMT
Subject: CN=248a0fbbef97fee33a12f622fa3ba51a9bc81f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:7b:1f:1b:ce:56:4c:97:73:84:d4:d2:b2:
ed:eb:96:78:c3:e3:5e:a3:46:53:c8:ad:13:dd:f0:
3e:3f:41:fa:27:ee:55:72:8d:c9:1c:4d:6f:c8:3b:
c2:ea:0a:4e:5d:89:09:34:f2:6f:25:b2:7f:b5:b0:
cc:ba:f9:a3:43:92:68:0c:96:d7:11:7b:ba:fd:77:
7b:7e:0f:0a:e1:09:c8:8f:b9:2e:4e:cb:86:b8:78:
20:5d:37:2b:2d:f5:82:87:e2:b3:a6:42:7c:5a:69:
74:18:27:09:c7:91:28:8b:59:10:af:44:b5:57:94:
24:37:0b:e1:8e:2b:c3:1e:5f:b8:a7:10:57:39:25:
9d:54:25:6e:26:7c:df:ed:e6:26:ac:03:fc:56:8a:
7d:02:e3:ed:27:7f:7d:ed:99:83:94:fd:64:3a:3f:
9c:ca:3f:8b:7b:a4:81:2f:90:51:22:bb:44:a1:66:
36:ab:32:30:39:61:cd:21:6d:1d:8b:57:b2:fd:6a:
05:52:cb:c7:ae:b7:d4:06:c9:9b:6f:e6:c6:b4:cd:
7c:e5:c9:c7:63:b1:f7:e7:b8:00:b6:04:dc:58:24:
4b:b8:95:c2:b6:f5:49:82:40:8a:20:09:e7:a9:b0:
f4:af:e1:e7:da:7b:2a:56:99:ee:f3:a1:df:e3:db:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8A:0F:BB:EF:97:FE:E3:3A:12:F6:22:FA:3B:A5:1A:9B:C8:1F:4E
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4b:1c:fa:f2:e7:b9:3a:9c:c4:92:fc:ba:6a:b6:9d:96:ea:
0e:2e:31:ab:6f:94:d5:7f:b1:d8:61:d0:f2:8b:d6:d4:17:6f:
6c:ad:d5:7d:fd:09:35:bf:ba:76:04:b6:df:fd:47:82:bf:ce:
bd:1a:44:06:61:e6:b9:7a:95:d1:af:d6:d0:06:4b:c5:fa:70:
00:ed:f1:b6:d1:9f:e7:19:15:4e:dc:35:21:87:67:17:79:ac:
2a:b7:85:1f:81:34:12:29:5f:29:ed:1b:ca:58:20:6e:e9:7d:
7c:11:05:ce:ed:4b:b5:e1:d6:7a:41:da:b5:8d:3c:70:c9:4e:
a0:b0:43:ef:63:7c:9e:9e:c4:9a:9e:11:b2:64:39:4a:44:2c:
2e:ce:16:4a:52:ed:44:8e:c9:55:7e:0f:f1:c0:2e:8c:6f:71:
d0:db:b1:a9:39:90:60:ac:88:c5:a2:24:29:3b:d7:6d:d1:18:
6a:37:05:4c:63:ad:a7:00:32:0b:1b:d0:7b:dc:d0:0c:c2:81:
98:a6:c1:76:8e:16:f0:d7:c1:a6:12:5e:88:c2:c3:c0:02:f6:
5d:f5:5f:2b:03:20:7a:4a:57:ad:d1:06:2e:53:88:51:23:e6:
cc:34:f1:33:f6:12:28:6e:ba:a6:ad:4d:d3:41:da:bf:92:45:
57:09:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:13:53 2025 by rpki-client